» PhotoProductCore.exe
Overview
Analysis
File Details
Programs (2)

PhotoProductCore.exe

Visan Industries

File name:

Publisher:

Visan / RocketLife (signed by Visan Industries)

Product:

PhotoProductCore.exe

Version:

1, 0, 0, 7702

MD5:

2057d12811dc95c2104a36605b45e92d

SHA-1:

945683686c28adba24dc4885fe433fc7d1fb7f7c

SHA-256:

953b2cf8b9bff04de21ad0b8866bccb6434ef4f8752c19383f264972c84ef237

Scanner detections:

7 / 68

Status:

Clean (7 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/27/2024 4:17:18 AM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:Oncer

2014.9-160215

Dr.Web

Win32.Runonce.6652

9.0.1.046

ESET NOD32

Win32/Slugin.A virus

10.7.0.302.0

F-Prot

W32/Thecid.B@mm

v6.4.6.5.141

McAfee

Virus.W32/Wplugin

5600.6488

Microsoft Security Essentials

Threat.Undefined

1.213.6208.0

VIPRE Antivirus

Threat.219451

47028

File size:

298.2 KB (305,320 bytes)

Product version:

1, 0, 0, 7702

Original file name:

PhotoProductCore.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\hp photo creations\photoproductcore.exe

Digital Signature

Signed by:

Visan Industries

Authority:

Thawte, Inc.

Valid from:

9/12/2011 2:00:00 AM

Valid to:

9/15/2012 1:59:59 AM

Subject:

CN=Visan Industries, OU=SECURE APPLICATION DEVELOPMENT, O=Visan Industries, L=Folsom, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

64EE6B5240E61AA8AF7428864A13310F

File PE Metadata

Compilation timestamp:

3/2/2012 12:39:55 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.0

CTPH (ssdeep):

6144:Y8GwDPo5RfKkUJ/CaeAGS6JpVtQwMh8FQTBfLWYyP7mt:Yj0g5RfzUJ/CaeAL63bQmQTxt

Entry address:

0x225F3

Entry point:

6A, 60, 68, 10, 8A, 43, 00, E8, 31, 0C, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, C5, ED, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 40, E2, 42, 00, 8B, 4E, 10, 89, 0D, 74, 52, 45, 00, 8B, 46, 04, A3, 80, 52, 45, 00, 8B, 56, 08, 89, 15, 84, 52, 45, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 78, 52, 45, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 78, 52, 45, 00, C1, E0, 08, 03, C2, A3, 7C, 52, 45, 00, 33, F6, 56, 8B, 3D, C4, E1, 42, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

180 KB (184,320 bytes)

The file PhotoProductCore.exe has been discovered within the following programs.

HP Photo Creations by Hewlett-Packard

Like to get creative with your photos? With HP Photo Creations, you can easily create beautiful keepsakes such as cards, calendars, photo books, and much more. Customize your projects with rich backgrounds, styled text, hundreds of graphics and thousands of border styles.

www.hp.com

23% remove it

PrintProjects by RocketLife Inc.

Publisher's description - “PrintProjects software, powered by RocketLife, is the easy way to make truly personal collage prints, calendars, greeting cards, and more. It's fast, fun, and the results are beautiful. Print your creations at home or have your creations shipped to you.”

About 3% of users remove it

Scan PhotoProductCore.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.